2 # Generic algorithms support
8 # async_tx api: hardware offloaded memory transfer/transform support
10 source "crypto/async_tx/Kconfig"
13 # Cryptographic API Configuration
16 tristate "Cryptographic API"
18 This option provides the core Cryptographic API.
22 comment "Crypto core or helper"
25 bool "FIPS 200 compliance"
26 depends on CRYPTO_ANSI_CPRNG && !CRYPTO_MANAGER_DISABLE_TESTS
28 This options enables the fips boot option which is
29 required if you want to system to operate in a FIPS 200
30 certification. You should say no unless you know what
37 This option provides the API for cryptographic algorithms.
51 config CRYPTO_BLKCIPHER
53 select CRYPTO_BLKCIPHER2
56 config CRYPTO_BLKCIPHER2
60 select CRYPTO_WORKQUEUE
90 tristate "Cryptographic algorithm manager"
91 select CRYPTO_MANAGER2
93 Create default cryptographic template instantiations such as
96 config CRYPTO_MANAGER2
97 def_tristate CRYPTO_MANAGER || (CRYPTO_MANAGER!=n && CRYPTO_ALGAPI=y)
100 select CRYPTO_BLKCIPHER2
104 tristate "Userspace cryptographic algorithm configuration"
106 select CRYPTO_MANAGER
108 Userspace configuration for cryptographic instantiations such as
111 config CRYPTO_MANAGER_DISABLE_TESTS
112 bool "Disable run-time self tests"
114 depends on CRYPTO_MANAGER2
116 Disable run-time self tests that normally take place at
117 algorithm registration.
119 config CRYPTO_GF128MUL
120 tristate "GF(2^128) multiplication functions"
122 Efficient table driven implementation of multiplications in the
123 field GF(2^128). This is needed by some cypher modes. This
124 option will be selected automatically if you select such a
125 cipher mode. Only select this option by hand if you expect to load
126 an external module that requires these functions.
129 tristate "Null algorithms"
131 select CRYPTO_BLKCIPHER
134 These are 'Null' algorithms, used by IPsec, which do nothing.
137 tristate "Parallel crypto engine (EXPERIMENTAL)"
138 depends on SMP && EXPERIMENTAL
140 select CRYPTO_MANAGER
143 This converts an arbitrary crypto algorithm into a parallel
144 algorithm that executes in kernel threads.
146 config CRYPTO_WORKQUEUE
150 tristate "Software async crypto daemon"
151 select CRYPTO_BLKCIPHER
153 select CRYPTO_MANAGER
154 select CRYPTO_WORKQUEUE
156 This is a generic software asynchronous crypto daemon that
157 converts an arbitrary synchronous software crypto algorithm
158 into an asynchronous algorithm that executes in a kernel thread.
160 config CRYPTO_AUTHENC
161 tristate "Authenc support"
163 select CRYPTO_BLKCIPHER
164 select CRYPTO_MANAGER
167 Authenc: Combined mode wrapper for IPsec.
168 This is required for IPSec.
171 tristate "Testing module"
173 select CRYPTO_MANAGER
175 Quick & dirty crypto test module.
177 config CRYPTO_ABLK_HELPER_X86
182 config CRYPTO_GLUE_HELPER_X86
187 comment "Authenticated Encryption with Associated Data"
190 tristate "CCM support"
194 Support for Counter with CBC MAC. Required for IPsec.
197 tristate "GCM/GMAC support"
202 Support for Galois/Counter Mode (GCM) and Galois Message
203 Authentication Code (GMAC). Required for IPSec.
206 tristate "Sequence Number IV Generator"
208 select CRYPTO_BLKCIPHER
211 This IV generator generates an IV based on a sequence number by
212 xoring it with a salt. This algorithm is mainly useful for CTR
214 comment "Block modes"
217 tristate "CBC support"
218 select CRYPTO_BLKCIPHER
219 select CRYPTO_MANAGER
221 CBC: Cipher Block Chaining mode
222 This block cipher algorithm is required for IPSec.
225 tristate "CTR support"
226 select CRYPTO_BLKCIPHER
228 select CRYPTO_MANAGER
231 This block cipher algorithm is required for IPSec.
234 tristate "CTS support"
235 select CRYPTO_BLKCIPHER
237 CTS: Cipher Text Stealing
238 This is the Cipher Text Stealing mode as described by
239 Section 8 of rfc2040 and referenced by rfc3962.
240 (rfc3962 includes errata information in its Appendix A)
241 This mode is required for Kerberos gss mechanism support
245 tristate "ECB support"
246 select CRYPTO_BLKCIPHER
247 select CRYPTO_MANAGER
249 ECB: Electronic CodeBook mode
250 This is the simplest block cipher algorithm. It simply encrypts
251 the input block by block.
254 tristate "LRW support"
255 select CRYPTO_BLKCIPHER
256 select CRYPTO_MANAGER
257 select CRYPTO_GF128MUL
259 LRW: Liskov Rivest Wagner, a tweakable, non malleable, non movable
260 narrow block cipher mode for dm-crypt. Use it with cipher
261 specification string aes-lrw-benbi, the key must be 256, 320 or 384.
262 The first 128, 192 or 256 bits in the key are used for AES and the
263 rest is used to tie each cipher block to its logical position.
266 tristate "PCBC support"
267 select CRYPTO_BLKCIPHER
268 select CRYPTO_MANAGER
270 PCBC: Propagating Cipher Block Chaining mode
271 This block cipher algorithm is required for RxRPC.
274 tristate "XTS support"
275 select CRYPTO_BLKCIPHER
276 select CRYPTO_MANAGER
277 select CRYPTO_GF128MUL
279 XTS: IEEE1619/D16 narrow block cipher use with aes-xts-plain,
280 key size 256, 384 or 512 bits. This implementation currently
281 can't handle a sectorsize which is not a multiple of 16 bytes.
286 tristate "HMAC support"
288 select CRYPTO_MANAGER
290 HMAC: Keyed-Hashing for Message Authentication (RFC2104).
291 This is required for IPSec.
294 tristate "XCBC support"
295 depends on EXPERIMENTAL
297 select CRYPTO_MANAGER
299 XCBC: Keyed-Hashing with encryption algorithm
300 http://www.ietf.org/rfc/rfc3566.txt
301 http://csrc.nist.gov/encryption/modes/proposedmodes/
302 xcbc-mac/xcbc-mac-spec.pdf
305 tristate "VMAC support"
306 depends on EXPERIMENTAL
308 select CRYPTO_MANAGER
310 VMAC is a message authentication algorithm designed for
311 very high speed on 64-bit architectures.
314 <http://fastcrypto.org/vmac>
319 tristate "CRC32c CRC algorithm"
323 Castagnoli, et al Cyclic Redundancy-Check Algorithm. Used
324 by iSCSI for header and data digests and by others.
325 See Castagnoli93. Module will be crc32c.
327 config CRYPTO_CRC32C_X86_64
329 depends on X86 && 64BIT
332 In Intel processor with SSE4.2 supported, the processor will
333 support CRC32C calculation using hardware accelerated CRC32
334 instruction optimized with PCLMULQDQ instruction when available.
336 config CRYPTO_CRC32C_INTEL
337 tristate "CRC32c INTEL hardware acceleration"
339 select CRYPTO_CRC32C_X86_64 if 64BIT
342 In Intel processor with SSE4.2 supported, the processor will
343 support CRC32C implementation using hardware accelerated CRC32
344 instruction. This option will create 'crc32c-intel' module,
345 which will enable any routine to use the CRC32 instruction to
346 gain performance compared with software implementation.
347 Module will be crc32c-intel.
349 config CRYPTO_CRC32C_SPARC64
350 tristate "CRC32c CRC algorithm (SPARC64)"
355 CRC32c CRC algorithm implemented using sparc64 crypto instructions,
359 tristate "CRC32 CRC algorithm"
363 CRC-32-IEEE 802.3 cyclic redundancy-check algorithm.
364 Shash crypto api wrappers to crc32_le function.
366 config CRYPTO_CRC32_PCLMUL
367 tristate "CRC32 PCLMULQDQ hardware acceleration"
372 From Intel Westmere and AMD Bulldozer processor with SSE4.2
373 and PCLMULQDQ supported, the processor will support
374 CRC32 PCLMULQDQ implementation using hardware accelerated PCLMULQDQ
375 instruction. This option will create 'crc32-plcmul' module,
376 which will enable any routine to use the CRC-32-IEEE 802.3 checksum
377 and gain better performance as compared with the table implementation.
380 tristate "GHASH digest algorithm"
381 select CRYPTO_GF128MUL
383 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
386 tristate "MD4 digest algorithm"
389 MD4 message digest algorithm (RFC1320).
392 tristate "MD5 digest algorithm"
395 MD5 message digest algorithm (RFC1321).
397 config CRYPTO_MD5_SPARC64
398 tristate "MD5 digest algorithm (SPARC64)"
403 MD5 message digest algorithm (RFC1321) implemented
404 using sparc64 crypto instructions, when available.
406 config CRYPTO_MICHAEL_MIC
407 tristate "Michael MIC keyed digest algorithm"
410 Michael MIC is used for message integrity protection in TKIP
411 (IEEE 802.11i). This algorithm is required for TKIP, but it
412 should not be used for other purposes because of the weakness
416 tristate "RIPEMD-128 digest algorithm"
419 RIPEMD-128 (ISO/IEC 10118-3:2004).
421 RIPEMD-128 is a 128-bit cryptographic hash function. It should only
422 be used as a secure replacement for RIPEMD. For other use cases,
423 RIPEMD-160 should be used.
425 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
426 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
429 tristate "RIPEMD-160 digest algorithm"
432 RIPEMD-160 (ISO/IEC 10118-3:2004).
434 RIPEMD-160 is a 160-bit cryptographic hash function. It is intended
435 to be used as a secure replacement for the 128-bit hash functions
436 MD4, MD5 and it's predecessor RIPEMD
437 (not to be confused with RIPEMD-128).
439 It's speed is comparable to SHA1 and there are no known attacks
442 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
443 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
446 tristate "RIPEMD-256 digest algorithm"
449 RIPEMD-256 is an optional extension of RIPEMD-128 with a
450 256 bit hash. It is intended for applications that require
451 longer hash-results, without needing a larger security level
454 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
455 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
458 tristate "RIPEMD-320 digest algorithm"
461 RIPEMD-320 is an optional extension of RIPEMD-160 with a
462 320 bit hash. It is intended for applications that require
463 longer hash-results, without needing a larger security level
466 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
467 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
470 tristate "SHA1 digest algorithm"
473 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
475 config CRYPTO_SHA1_SSSE3
476 tristate "SHA1 digest algorithm (SSSE3/AVX)"
477 depends on X86 && 64BIT
481 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
482 using Supplemental SSE3 (SSSE3) instructions or Advanced Vector
483 Extensions (AVX), when available.
485 config CRYPTO_SHA1_SPARC64
486 tristate "SHA1 digest algorithm (SPARC64)"
491 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
492 using sparc64 crypto instructions, when available.
494 config CRYPTO_SHA1_ARM
495 tristate "SHA1 digest algorithm (ARM-asm)"
500 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
501 using optimized ARM assembler.
504 tristate "SHA224 and SHA256 digest algorithm"
507 SHA256 secure hash standard (DFIPS 180-2).
509 This version of SHA implements a 256 bit hash with 128 bits of
510 security against collision attacks.
512 This code also includes SHA-224, a 224 bit hash with 112 bits
513 of security against collision attacks.
515 config CRYPTO_SHA256_SPARC64
516 tristate "SHA224 and SHA256 digest algorithm (SPARC64)"
521 SHA-256 secure hash standard (DFIPS 180-2) implemented
522 using sparc64 crypto instructions, when available.
525 tristate "SHA384 and SHA512 digest algorithms"
528 SHA512 secure hash standard (DFIPS 180-2).
530 This version of SHA implements a 512 bit hash with 256 bits of
531 security against collision attacks.
533 This code also includes SHA-384, a 384 bit hash with 192 bits
534 of security against collision attacks.
536 config CRYPTO_SHA512_SPARC64
537 tristate "SHA384 and SHA512 digest algorithm (SPARC64)"
542 SHA-512 secure hash standard (DFIPS 180-2) implemented
543 using sparc64 crypto instructions, when available.
546 tristate "Tiger digest algorithms"
549 Tiger hash algorithm 192, 160 and 128-bit hashes
551 Tiger is a hash function optimized for 64-bit processors while
552 still having decent performance on 32-bit processors.
553 Tiger was developed by Ross Anderson and Eli Biham.
556 <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>.
559 tristate "Whirlpool digest algorithms"
562 Whirlpool hash algorithm 512, 384 and 256-bit hashes
564 Whirlpool-512 is part of the NESSIE cryptographic primitives.
565 Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard
568 <http://www.larc.usp.br/~pbarreto/WhirlpoolPage.html>
570 config CRYPTO_GHASH_CLMUL_NI_INTEL
571 tristate "GHASH digest algorithm (CLMUL-NI accelerated)"
572 depends on X86 && 64BIT
575 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
576 The implementation is accelerated by CLMUL-NI of Intel.
581 tristate "AES cipher algorithms"
584 AES cipher algorithms (FIPS-197). AES uses the Rijndael
587 Rijndael appears to be consistently a very good performer in
588 both hardware and software across a wide range of computing
589 environments regardless of its use in feedback or non-feedback
590 modes. Its key setup time is excellent, and its key agility is
591 good. Rijndael's very low memory requirements make it very well
592 suited for restricted-space environments, in which it also
593 demonstrates excellent performance. Rijndael's operations are
594 among the easiest to defend against power and timing attacks.
596 The AES specifies three key sizes: 128, 192 and 256 bits
598 See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information.
600 config CRYPTO_AES_586
601 tristate "AES cipher algorithms (i586)"
602 depends on (X86 || UML_X86) && !64BIT
606 AES cipher algorithms (FIPS-197). AES uses the Rijndael
609 Rijndael appears to be consistently a very good performer in
610 both hardware and software across a wide range of computing
611 environments regardless of its use in feedback or non-feedback
612 modes. Its key setup time is excellent, and its key agility is
613 good. Rijndael's very low memory requirements make it very well
614 suited for restricted-space environments, in which it also
615 demonstrates excellent performance. Rijndael's operations are
616 among the easiest to defend against power and timing attacks.
618 The AES specifies three key sizes: 128, 192 and 256 bits
620 See <http://csrc.nist.gov/encryption/aes/> for more information.
622 config CRYPTO_AES_X86_64
623 tristate "AES cipher algorithms (x86_64)"
624 depends on (X86 || UML_X86) && 64BIT
628 AES cipher algorithms (FIPS-197). AES uses the Rijndael
631 Rijndael appears to be consistently a very good performer in
632 both hardware and software across a wide range of computing
633 environments regardless of its use in feedback or non-feedback
634 modes. Its key setup time is excellent, and its key agility is
635 good. Rijndael's very low memory requirements make it very well
636 suited for restricted-space environments, in which it also
637 demonstrates excellent performance. Rijndael's operations are
638 among the easiest to defend against power and timing attacks.
640 The AES specifies three key sizes: 128, 192 and 256 bits
642 See <http://csrc.nist.gov/encryption/aes/> for more information.
644 config CRYPTO_AES_NI_INTEL
645 tristate "AES cipher algorithms (AES-NI)"
647 select CRYPTO_AES_X86_64 if 64BIT
648 select CRYPTO_AES_586 if !64BIT
650 select CRYPTO_ABLK_HELPER_X86
655 Use Intel AES-NI instructions for AES algorithm.
657 AES cipher algorithms (FIPS-197). AES uses the Rijndael
660 Rijndael appears to be consistently a very good performer in
661 both hardware and software across a wide range of computing
662 environments regardless of its use in feedback or non-feedback
663 modes. Its key setup time is excellent, and its key agility is
664 good. Rijndael's very low memory requirements make it very well
665 suited for restricted-space environments, in which it also
666 demonstrates excellent performance. Rijndael's operations are
667 among the easiest to defend against power and timing attacks.
669 The AES specifies three key sizes: 128, 192 and 256 bits
671 See <http://csrc.nist.gov/encryption/aes/> for more information.
673 In addition to AES cipher algorithm support, the acceleration
674 for some popular block cipher mode is supported too, including
675 ECB, CBC, LRW, PCBC, XTS. The 64 bit version has additional
676 acceleration for CTR.
678 config CRYPTO_AES_SPARC64
679 tristate "AES cipher algorithms (SPARC64)"
684 Use SPARC64 crypto opcodes for AES algorithm.
686 AES cipher algorithms (FIPS-197). AES uses the Rijndael
689 Rijndael appears to be consistently a very good performer in
690 both hardware and software across a wide range of computing
691 environments regardless of its use in feedback or non-feedback
692 modes. Its key setup time is excellent, and its key agility is
693 good. Rijndael's very low memory requirements make it very well
694 suited for restricted-space environments, in which it also
695 demonstrates excellent performance. Rijndael's operations are
696 among the easiest to defend against power and timing attacks.
698 The AES specifies three key sizes: 128, 192 and 256 bits
700 See <http://csrc.nist.gov/encryption/aes/> for more information.
702 In addition to AES cipher algorithm support, the acceleration
703 for some popular block cipher mode is supported too, including
706 config CRYPTO_AES_ARM
707 tristate "AES cipher algorithms (ARM-asm)"
712 Use optimized AES assembler routines for ARM platforms.
714 AES cipher algorithms (FIPS-197). AES uses the Rijndael
717 Rijndael appears to be consistently a very good performer in
718 both hardware and software across a wide range of computing
719 environments regardless of its use in feedback or non-feedback
720 modes. Its key setup time is excellent, and its key agility is
721 good. Rijndael's very low memory requirements make it very well
722 suited for restricted-space environments, in which it also
723 demonstrates excellent performance. Rijndael's operations are
724 among the easiest to defend against power and timing attacks.
726 The AES specifies three key sizes: 128, 192 and 256 bits
728 See <http://csrc.nist.gov/encryption/aes/> for more information.
731 tristate "Anubis cipher algorithm"
734 Anubis cipher algorithm.
736 Anubis is a variable key length cipher which can use keys from
737 128 bits to 320 bits in length. It was evaluated as a entrant
738 in the NESSIE competition.
741 <https://www.cosic.esat.kuleuven.be/nessie/reports/>
742 <http://www.larc.usp.br/~pbarreto/AnubisPage.html>
745 tristate "ARC4 cipher algorithm"
746 select CRYPTO_BLKCIPHER
748 ARC4 cipher algorithm.
750 ARC4 is a stream cipher using keys ranging from 8 bits to 2048
751 bits in length. This algorithm is required for driver-based
752 WEP, but it should not be for other purposes because of the
753 weakness of the algorithm.
755 config CRYPTO_BLOWFISH
756 tristate "Blowfish cipher algorithm"
758 select CRYPTO_BLOWFISH_COMMON
760 Blowfish cipher algorithm, by Bruce Schneier.
762 This is a variable key length cipher which can use keys from 32
763 bits to 448 bits in length. It's fast, simple and specifically
764 designed for use on "large microprocessors".
767 <http://www.schneier.com/blowfish.html>
769 config CRYPTO_BLOWFISH_COMMON
772 Common parts of the Blowfish cipher algorithm shared by the
773 generic c and the assembler implementations.
776 <http://www.schneier.com/blowfish.html>
778 config CRYPTO_BLOWFISH_X86_64
779 tristate "Blowfish cipher algorithm (x86_64)"
780 depends on X86 && 64BIT
782 select CRYPTO_BLOWFISH_COMMON
784 Blowfish cipher algorithm (x86_64), by Bruce Schneier.
786 This is a variable key length cipher which can use keys from 32
787 bits to 448 bits in length. It's fast, simple and specifically
788 designed for use on "large microprocessors".
791 <http://www.schneier.com/blowfish.html>
793 config CRYPTO_CAMELLIA
794 tristate "Camellia cipher algorithms"
798 Camellia cipher algorithms module.
800 Camellia is a symmetric key block cipher developed jointly
801 at NTT and Mitsubishi Electric Corporation.
803 The Camellia specifies three key sizes: 128, 192 and 256 bits.
806 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
808 config CRYPTO_CAMELLIA_X86_64
809 tristate "Camellia cipher algorithm (x86_64)"
810 depends on X86 && 64BIT
813 select CRYPTO_GLUE_HELPER_X86
817 Camellia cipher algorithm module (x86_64).
819 Camellia is a symmetric key block cipher developed jointly
820 at NTT and Mitsubishi Electric Corporation.
822 The Camellia specifies three key sizes: 128, 192 and 256 bits.
825 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
827 config CRYPTO_CAMELLIA_AESNI_AVX_X86_64
828 tristate "Camellia cipher algorithm (x86_64/AES-NI/AVX)"
829 depends on X86 && 64BIT
833 select CRYPTO_ABLK_HELPER_X86
834 select CRYPTO_GLUE_HELPER_X86
835 select CRYPTO_CAMELLIA_X86_64
839 Camellia cipher algorithm module (x86_64/AES-NI/AVX).
841 Camellia is a symmetric key block cipher developed jointly
842 at NTT and Mitsubishi Electric Corporation.
844 The Camellia specifies three key sizes: 128, 192 and 256 bits.
847 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
849 config CRYPTO_CAMELLIA_SPARC64
850 tristate "Camellia cipher algorithm (SPARC64)"
855 Camellia cipher algorithm module (SPARC64).
857 Camellia is a symmetric key block cipher developed jointly
858 at NTT and Mitsubishi Electric Corporation.
860 The Camellia specifies three key sizes: 128, 192 and 256 bits.
863 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
865 config CRYPTO_CAST_COMMON
868 Common parts of the CAST cipher algorithms shared by the
869 generic c and the assembler implementations.
872 tristate "CAST5 (CAST-128) cipher algorithm"
874 select CRYPTO_CAST_COMMON
876 The CAST5 encryption algorithm (synonymous with CAST-128) is
877 described in RFC2144.
879 config CRYPTO_CAST5_AVX_X86_64
880 tristate "CAST5 (CAST-128) cipher algorithm (x86_64/AVX)"
881 depends on X86 && 64BIT
884 select CRYPTO_ABLK_HELPER_X86
885 select CRYPTO_CAST_COMMON
888 The CAST5 encryption algorithm (synonymous with CAST-128) is
889 described in RFC2144.
891 This module provides the Cast5 cipher algorithm that processes
892 sixteen blocks parallel using the AVX instruction set.
895 tristate "CAST6 (CAST-256) cipher algorithm"
897 select CRYPTO_CAST_COMMON
899 The CAST6 encryption algorithm (synonymous with CAST-256) is
900 described in RFC2612.
902 config CRYPTO_CAST6_AVX_X86_64
903 tristate "CAST6 (CAST-256) cipher algorithm (x86_64/AVX)"
904 depends on X86 && 64BIT
907 select CRYPTO_ABLK_HELPER_X86
908 select CRYPTO_GLUE_HELPER_X86
909 select CRYPTO_CAST_COMMON
914 The CAST6 encryption algorithm (synonymous with CAST-256) is
915 described in RFC2612.
917 This module provides the Cast6 cipher algorithm that processes
918 eight blocks parallel using the AVX instruction set.
921 tristate "DES and Triple DES EDE cipher algorithms"
924 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
926 config CRYPTO_DES_SPARC64
927 tristate "DES and Triple DES EDE cipher algorithms (SPARC64)"
932 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3),
933 optimized using SPARC64 crypto opcodes.
936 tristate "FCrypt cipher algorithm"
938 select CRYPTO_BLKCIPHER
940 FCrypt algorithm used by RxRPC.
943 tristate "Khazad cipher algorithm"
946 Khazad cipher algorithm.
948 Khazad was a finalist in the initial NESSIE competition. It is
949 an algorithm optimized for 64-bit processors with good performance
950 on 32-bit processors. Khazad uses an 128 bit key size.
953 <http://www.larc.usp.br/~pbarreto/KhazadPage.html>
955 config CRYPTO_SALSA20
956 tristate "Salsa20 stream cipher algorithm (EXPERIMENTAL)"
957 depends on EXPERIMENTAL
958 select CRYPTO_BLKCIPHER
960 Salsa20 stream cipher algorithm.
962 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
963 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
965 The Salsa20 stream cipher algorithm is designed by Daniel J.
966 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
968 config CRYPTO_SALSA20_586
969 tristate "Salsa20 stream cipher algorithm (i586) (EXPERIMENTAL)"
970 depends on (X86 || UML_X86) && !64BIT
971 depends on EXPERIMENTAL
972 select CRYPTO_BLKCIPHER
974 Salsa20 stream cipher algorithm.
976 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
977 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
979 The Salsa20 stream cipher algorithm is designed by Daniel J.
980 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
982 config CRYPTO_SALSA20_X86_64
983 tristate "Salsa20 stream cipher algorithm (x86_64) (EXPERIMENTAL)"
984 depends on (X86 || UML_X86) && 64BIT
985 depends on EXPERIMENTAL
986 select CRYPTO_BLKCIPHER
988 Salsa20 stream cipher algorithm.
990 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
991 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
993 The Salsa20 stream cipher algorithm is designed by Daniel J.
994 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
997 tristate "SEED cipher algorithm"
1000 SEED cipher algorithm (RFC4269).
1002 SEED is a 128-bit symmetric key block cipher that has been
1003 developed by KISA (Korea Information Security Agency) as a
1004 national standard encryption algorithm of the Republic of Korea.
1005 It is a 16 round block cipher with the key size of 128 bit.
1008 <http://www.kisa.or.kr/kisa/seed/jsp/seed_eng.jsp>
1010 config CRYPTO_SERPENT
1011 tristate "Serpent cipher algorithm"
1012 select CRYPTO_ALGAPI
1014 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1016 Keys are allowed to be from 0 to 256 bits in length, in steps
1017 of 8 bits. Also includes the 'Tnepres' algorithm, a reversed
1018 variant of Serpent for compatibility with old kerneli.org code.
1021 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1023 config CRYPTO_SERPENT_SSE2_X86_64
1024 tristate "Serpent cipher algorithm (x86_64/SSE2)"
1025 depends on X86 && 64BIT
1026 select CRYPTO_ALGAPI
1027 select CRYPTO_CRYPTD
1028 select CRYPTO_ABLK_HELPER_X86
1029 select CRYPTO_GLUE_HELPER_X86
1030 select CRYPTO_SERPENT
1034 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1036 Keys are allowed to be from 0 to 256 bits in length, in steps
1039 This module provides Serpent cipher algorithm that processes eigth
1040 blocks parallel using SSE2 instruction set.
1043 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1045 config CRYPTO_SERPENT_SSE2_586
1046 tristate "Serpent cipher algorithm (i586/SSE2)"
1047 depends on X86 && !64BIT
1048 select CRYPTO_ALGAPI
1049 select CRYPTO_CRYPTD
1050 select CRYPTO_ABLK_HELPER_X86
1051 select CRYPTO_GLUE_HELPER_X86
1052 select CRYPTO_SERPENT
1056 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1058 Keys are allowed to be from 0 to 256 bits in length, in steps
1061 This module provides Serpent cipher algorithm that processes four
1062 blocks parallel using SSE2 instruction set.
1065 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1067 config CRYPTO_SERPENT_AVX_X86_64
1068 tristate "Serpent cipher algorithm (x86_64/AVX)"
1069 depends on X86 && 64BIT
1070 select CRYPTO_ALGAPI
1071 select CRYPTO_CRYPTD
1072 select CRYPTO_ABLK_HELPER_X86
1073 select CRYPTO_GLUE_HELPER_X86
1074 select CRYPTO_SERPENT
1078 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1080 Keys are allowed to be from 0 to 256 bits in length, in steps
1083 This module provides the Serpent cipher algorithm that processes
1084 eight blocks parallel using the AVX instruction set.
1087 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1090 tristate "TEA, XTEA and XETA cipher algorithms"
1091 select CRYPTO_ALGAPI
1093 TEA cipher algorithm.
1095 Tiny Encryption Algorithm is a simple cipher that uses
1096 many rounds for security. It is very fast and uses
1099 Xtendend Tiny Encryption Algorithm is a modification to
1100 the TEA algorithm to address a potential key weakness
1101 in the TEA algorithm.
1103 Xtendend Encryption Tiny Algorithm is a mis-implementation
1104 of the XTEA algorithm for compatibility purposes.
1106 config CRYPTO_TWOFISH
1107 tristate "Twofish cipher algorithm"
1108 select CRYPTO_ALGAPI
1109 select CRYPTO_TWOFISH_COMMON
1111 Twofish cipher algorithm.
1113 Twofish was submitted as an AES (Advanced Encryption Standard)
1114 candidate cipher by researchers at CounterPane Systems. It is a
1115 16 round block cipher supporting key sizes of 128, 192, and 256
1119 <http://www.schneier.com/twofish.html>
1121 config CRYPTO_TWOFISH_COMMON
1124 Common parts of the Twofish cipher algorithm shared by the
1125 generic c and the assembler implementations.
1127 config CRYPTO_TWOFISH_586
1128 tristate "Twofish cipher algorithms (i586)"
1129 depends on (X86 || UML_X86) && !64BIT
1130 select CRYPTO_ALGAPI
1131 select CRYPTO_TWOFISH_COMMON
1133 Twofish cipher algorithm.
1135 Twofish was submitted as an AES (Advanced Encryption Standard)
1136 candidate cipher by researchers at CounterPane Systems. It is a
1137 16 round block cipher supporting key sizes of 128, 192, and 256
1141 <http://www.schneier.com/twofish.html>
1143 config CRYPTO_TWOFISH_X86_64
1144 tristate "Twofish cipher algorithm (x86_64)"
1145 depends on (X86 || UML_X86) && 64BIT
1146 select CRYPTO_ALGAPI
1147 select CRYPTO_TWOFISH_COMMON
1149 Twofish cipher algorithm (x86_64).
1151 Twofish was submitted as an AES (Advanced Encryption Standard)
1152 candidate cipher by researchers at CounterPane Systems. It is a
1153 16 round block cipher supporting key sizes of 128, 192, and 256
1157 <http://www.schneier.com/twofish.html>
1159 config CRYPTO_TWOFISH_X86_64_3WAY
1160 tristate "Twofish cipher algorithm (x86_64, 3-way parallel)"
1161 depends on X86 && 64BIT
1162 select CRYPTO_ALGAPI
1163 select CRYPTO_TWOFISH_COMMON
1164 select CRYPTO_TWOFISH_X86_64
1165 select CRYPTO_GLUE_HELPER_X86
1169 Twofish cipher algorithm (x86_64, 3-way parallel).
1171 Twofish was submitted as an AES (Advanced Encryption Standard)
1172 candidate cipher by researchers at CounterPane Systems. It is a
1173 16 round block cipher supporting key sizes of 128, 192, and 256
1176 This module provides Twofish cipher algorithm that processes three
1177 blocks parallel, utilizing resources of out-of-order CPUs better.
1180 <http://www.schneier.com/twofish.html>
1182 config CRYPTO_TWOFISH_AVX_X86_64
1183 tristate "Twofish cipher algorithm (x86_64/AVX)"
1184 depends on X86 && 64BIT
1185 select CRYPTO_ALGAPI
1186 select CRYPTO_CRYPTD
1187 select CRYPTO_ABLK_HELPER_X86
1188 select CRYPTO_GLUE_HELPER_X86
1189 select CRYPTO_TWOFISH_COMMON
1190 select CRYPTO_TWOFISH_X86_64
1191 select CRYPTO_TWOFISH_X86_64_3WAY
1195 Twofish cipher algorithm (x86_64/AVX).
1197 Twofish was submitted as an AES (Advanced Encryption Standard)
1198 candidate cipher by researchers at CounterPane Systems. It is a
1199 16 round block cipher supporting key sizes of 128, 192, and 256
1202 This module provides the Twofish cipher algorithm that processes
1203 eight blocks parallel using the AVX Instruction Set.
1206 <http://www.schneier.com/twofish.html>
1208 comment "Compression"
1210 config CRYPTO_DEFLATE
1211 tristate "Deflate compression algorithm"
1212 select CRYPTO_ALGAPI
1216 This is the Deflate algorithm (RFC1951), specified for use in
1217 IPSec with the IPCOMP protocol (RFC3173, RFC2394).
1219 You will most probably want this if using IPSec.
1222 tristate "Zlib compression algorithm"
1228 This is the zlib algorithm.
1231 tristate "LZO compression algorithm"
1232 select CRYPTO_ALGAPI
1234 select LZO_DECOMPRESS
1236 This is the LZO algorithm.
1239 tristate "842 compression algorithm"
1240 depends on CRYPTO_DEV_NX_COMPRESS
1241 # 842 uses lzo if the hardware becomes unavailable
1243 select LZO_DECOMPRESS
1245 This is the 842 algorithm.
1247 comment "Random Number Generation"
1249 config CRYPTO_ANSI_CPRNG
1250 tristate "Pseudo Random Number Generation for Cryptographic modules"
1255 This option enables the generic pseudo random number generator
1256 for cryptographic modules. Uses the Algorithm specified in
1257 ANSI X9.31 A.2.4. Note that this option must be enabled if
1258 CRYPTO_FIPS is selected
1260 config CRYPTO_USER_API
1263 config CRYPTO_USER_API_HASH
1264 tristate "User-space interface for hash algorithms"
1267 select CRYPTO_USER_API
1269 This option enables the user-spaces interface for hash
1272 config CRYPTO_USER_API_SKCIPHER
1273 tristate "User-space interface for symmetric key cipher algorithms"
1275 select CRYPTO_BLKCIPHER
1276 select CRYPTO_USER_API
1278 This option enables the user-spaces interface for symmetric
1279 key cipher algorithms.
1281 source "drivers/crypto/Kconfig"
1282 source crypto/asymmetric_keys/Kconfig